Uncontrolled recursion in Decoder.Decode in encoding/gob before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a message which contains deeply nested structures.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade criu-develUpgrade containernetworking-pluginsUpgrade golang-raceUpgrade containers-commonUpgrade skopeoUpgrade golang-testsUpgrade criu-libsUpgrade podman-remoteUpgrade delveUpgrade grafana-pcpUpgrade oci-seccomp-bpf-hookUpgrade python3-podmanUpgrade golang-binUpgrade podmanUpgrade conmonUpgrade libslirp-develUpgrade grafanaUpgrade podman-pluginsUpgrade container-selinuxUpgrade crunUpgrade toolboxUpgrade skopeo-testsUpgrade podman-gvproxyUpgrade udicaUpgrade go-toolsetUpgrade buildah-testsUpgrade criuUpgrade buildahUpgrade python3-criuUpgrade netavarkUpgrade critUpgrade toolbox-testsUpgrade cockpit-podmanUpgrade golangUpgrade fuse-overlayfsUpgrade libslirpUpgrade git-lfsUpgrade aardvark-dnsUpgrade runcUpgrade golang-miscUpgrade podman-dockerUpgrade podman-catatonitUpgrade golang-docsUpgrade slirp4netnsUpgrade golang-srcUpgrade podman-tests | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade go-rpm-templatesUpgrade golang-srcUpgrade golang-github-gorilla-mux-develUpgrade golang-googlecode-net-develUpgrade go-rpm-macrosUpgrade golang-binUpgrade golang-github-syndtr-gocapability-develUpgrade go-srpm-macrosUpgrade golist-debuginfoUpgrade golang-github-godbus-dbus-develUpgrade golang-googlecode-sqlite-develUpgrade golangUpgrade runc-debuginfoUpgrade golang-sharedUpgrade runcUpgrade golang-docsUpgrade go-filesystemUpgrade golang-testsUpgrade golang-miscUpgrade golang-github-kr-pty-develUpgrade golang-github-gorilla-context-develUpgrade golistUpgrade golang-race | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golangUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golang-miscUpgrade golang-srcUpgrade golang-github-cpuguy83-md2man-develUpgrade golang-testsUpgrade golist-debugsourceUpgrade golist-debuginfoUpgrade golistUpgrade golang-docsUpgrade golang-sharedUpgrade golang-binUpgrade golang-raceUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-github-cpuguy83-md2man | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade podman-debuginfoUpgrade aardvark-dnsUpgrade podman-remoteUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade container-selinuxUpgrade grafana-pcp-debuginfoUpgrade buildah-testsUpgrade git-lfs-debuginfoUpgrade grafanaUpgrade runc-debugsourceUpgrade slirp4netns-debuginfoUpgrade grafana-pcpUpgrade toolbox-testsUpgrade podman-debugsourceUpgrade containernetworking-pluginsUpgrade delveUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirp-debuginfoUpgrade conmon-debuginfoUpgrade crunUpgrade golang-binUpgrade containernetworking-plugins-debuginfoUpgrade golang-testsUpgrade podman-plugins-debuginfoUpgrade slirp4netns-debugsourceUpgrade criu-libs-debuginfoUpgrade podmanUpgrade golang-docsUpgrade runc-debuginfoUpgrade critUpgrade go-toolsetUpgrade crun-debugsourceUpgrade git-lfsUpgrade toolbox-debugsourceUpgrade toolbox-debuginfoUpgrade libslirp-debugsourceUpgrade criu-debugsourceUpgrade skopeo-testsUpgrade udicaUpgrade python3-criuUpgrade criu-develUpgrade podman-dockerUpgrade runcUpgrade fuse-overlayfsUpgrade golang-raceUpgrade podman-gvproxyUpgrade fuse-overlayfs-debuginfoUpgrade podman-pluginsUpgrade golang-miscUpgrade netavarkUpgrade skopeo-debuginfoUpgrade slirp4netnsUpgrade skopeoUpgrade python3-podmanUpgrade fuse-overlayfs-debugsourceUpgrade delve-debugsourceUpgrade conmonUpgrade cockpit-podmanUpgrade libslirpUpgrade golangUpgrade git-lfs-debugsourceUpgrade crun-debuginfoUpgrade conmon-debugsourceUpgrade buildah-tests-debuginfoUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade delve-debuginfoUpgrade containers-commonUpgrade buildahUpgrade podman-catatonitUpgrade skopeo-debugsourceUpgrade podman-testsUpgrade containernetworking-plugins-debugsourceUpgrade buildah-debuginfoUpgrade toolboxUpgrade criuUpgrade podman-catatonit-debuginfoUpgrade libslirp-develUpgrade criu-debuginfoUpgrade grafana-debuginfoUpgrade golang-srcUpgrade buildah-debugsource | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go118Upgrade go117 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Nov 4, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Sep 14, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade golang-miscUpgrade podmanUpgrade golangUpgrade critUpgrade buildah-testsUpgrade fuse-overlayfsUpgrade criuUpgrade golang-testsUpgrade podman-catatonitUpgrade golang-raceUpgrade netavarkUpgrade aardvark-dnsUpgrade golang-binUpgrade buildahUpgrade podman-dockerUpgrade skopeoUpgrade runcUpgrade containernetworking-pluginsUpgrade golang-docsUpgrade grafana-pcpUpgrade podman-remoteUpgrade udicaUpgrade python3-podmanUpgrade grafanaUpgrade golang-srcUpgrade podman-pluginsUpgrade conmonUpgrade cockpit-podmanUpgrade container-selinuxUpgrade libslirpUpgrade oci-seccomp-bpf-hookUpgrade skopeo-testsUpgrade go-toolsetUpgrade podman-testsUpgrade delveUpgrade criu-libsUpgrade python3-criuUpgrade podman-gvproxyUpgrade containers-commonUpgrade slirp4netnsUpgrade git-lfsUpgrade crunUpgrade criu-develUpgrade libslirp-devel | Aug 4, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade containernetworking-plugins-debugsourceUpgrade toolboxUpgrade delveUpgrade criu-develUpgrade golang-binUpgrade grafana-pcp-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-libs-debuginfoUpgrade golang-docsUpgrade git-lfs-debugsourceUpgrade podman-plugins-debuginfoUpgrade grafanaUpgrade runcUpgrade delve-debugsourceUpgrade git-lfsUpgrade podman-gvproxyUpgrade libslirp-debuginfoUpgrade skopeo-testsUpgrade slirp4netnsUpgrade slirp4netns-debuginfoUpgrade libslirp-debugsourceUpgrade toolbox-debugsourceUpgrade container-selinuxUpgrade python3-criuUpgrade toolbox-debuginfoUpgrade buildah-debugsourceUpgrade podman-pluginsUpgrade libslirpUpgrade oci-seccomp-bpf-hook-debuginfoNo solution existsUpgrade runc-debuginfoUpgrade podman-testsUpgrade conmonUpgrade podman-catatonit-debuginfoUpgrade slirp4netns-debugsourceUpgrade critUpgrade go-toolsetUpgrade podman-gvproxy-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade podman-dockerUpgrade crunUpgrade podman-debugsourceUpgrade skopeo-debuginfoUpgrade udicaUpgrade podman-debuginfoUpgrade skopeoUpgrade fuse-overlayfsUpgrade fuse-overlayfs-debugsourceUpgrade buildah-debuginfoUpgrade podmanUpgrade golang-raceUpgrade golang-miscUpgrade aardvark-dnsUpgrade criu-debugsourceUpgrade runc-debugsourceUpgrade libslirp-develUpgrade containernetworking-pluginsUpgrade podman-catatonitUpgrade criu-libsUpgrade toolbox-testsUpgrade golang-testsUpgrade conmon-debugsourceUpgrade podman-remote-debuginfoUpgrade crun-debugsourceUpgrade podman-remoteUpgrade conmon-debuginfoUpgrade buildah-testsUpgrade buildahUpgrade golang-srcUpgrade git-lfs-debuginfoUpgrade criu-debuginfoUpgrade python3-podmanUpgrade skopeo-debugsourceUpgrade cockpit-podmanUpgrade containers-commonUpgrade netavarkUpgrade delve-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade grafana-pcpUpgrade oci-seccomp-bpf-hookUpgrade crun-debuginfoUpgrade buildah-tests-debuginfoUpgrade golangUpgrade criuUpgrade grafana-debuginfo | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade libslirp-debuginfoUpgrade criu-libs-debuginfoUpgrade git-lfsUpgrade criu-debugsourceUpgrade git-lfs-debuginfoUpgrade libslirp-develUpgrade critUpgrade golangUpgrade golang-binUpgrade grafana-debuginfoUpgrade python3-criuUpgrade go-toolsetUpgrade grafana-pcpUpgrade delve-debuginfoUpgrade criu-libsUpgrade grafanaUpgrade oci-seccomp-bpf-hookUpgrade criu-debuginfoUpgrade libslirpUpgrade git-lfs-debugsourceUpgrade criuUpgrade delve-debugsourceUpgrade criu-develUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade delveUpgrade golang-raceUpgrade grafana-pcp-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-debugsource | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.2.12 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18-docUpgrade go1.17-docUpgrade go1.18-opensslUpgrade go1.18Upgrade go1.17Upgrade go1.17-raceUpgrade go1.18-raceUpgrade go1.18-openssl-docUpgrade go1.18-openssl-race | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.13Upgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.13-srcUpgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.18Upgrade golang-1.16-srcUpgrade golang-1.18-goUpgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.16Upgrade golang-1.18-srcUpgrade golang-1.16-goUpgrade golang-1.13-go | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub